LEGAL

# Privacy Policy

Effective date: May 17, 2026  ·  Operated by Modern Media LLC

## 1. WHO WE ARE

Modern Media LLC ("we", "us", "our") operates WebEgg, an AI-powered website builder. This policy explains what data we collect when you use WebEgg, how we use it, and your rights regarding that data.

Contact: [support@webegg.ai](mailto:support@webegg.ai)

## 2. INFORMATION WE COLLECT

********************************

| Data | When collected | Purpose |
| --- | --- | --- |
| Business brief — business name, description, services, location, style preferences | When you fill out the website builder form | Generating your website |
| Contact info — name, email, phone, address | When you submit the funnel | Sending your preview link; included in your website content |
| Account credentials — email, password (hashed) | When you create an account | Authentication and account management |
| Payment info — billing details, subscription status | When you subscribe to a paid plan | Processing payments via Stripe (we never store raw card data) |
| Uploaded images — logo, business photos | If you upload them during setup | Including them in your generated website |
| Page views — anonymised IP hash, page visited, timestamp | When visitors view your published website | Providing you with basic analytics |
| Contact form submissions — fields submitted by your website visitors | When a visitor fills out a contact form on your site | Forwarding to you and storing in your dashboard inbox |
| AI edit history — edit prompts and responses | When you use the AI editor | Generating edits and maintaining edit count |

## 3. HOW WE USE YOUR INFORMATION

- To generate, host, and serve your website

- To send you your preview link and account-related emails

- To process payments and manage your subscription

- To forward contact form submissions from your site visitors to you

- To provide you with page view analytics

- To measure the effectiveness of our marketing campaigns (Meta Ads conversion tracking)

- To improve the Service (aggregate, anonymised usage data only)

## 4. ADVERTISING & ANALYTICS — META PIXEL

**WebEgg uses the Meta Pixel** (operated by Meta Platforms, Inc.) on our marketing pages and funnel. The Pixel collects information about your visit — including the pages you view, buttons you click ("Lead", "CompleteRegistration", "Purchase"), your IP address, browser type, and a Meta user identifier if you are signed in to Facebook or Instagram in the same browser.

This information is shared with Meta to:

- Measure the effectiveness of our advertising on Facebook and Instagram

- Show you relevant ads on Meta's platforms (retargeting)

- Build Lookalike Audiences from people who engage with WebEgg

**Under CCPA (California) and CPRA**, sharing data with Meta for cross-context behavioural advertising is considered "sharing" of personal information. California residents have the right to opt out — see ["Do Not Sell or Share My Personal Information"](#do-not-sell) below.

**Under GDPR (EU/UK)**, this processing relies on your consent. EU/UK visitors will see a cookie consent banner before the Pixel loads. You can withdraw consent at any time by clearing cookies or via the consent banner.

You can also opt out of Meta advertising directly in your [Facebook Ad Preferences](https://www.facebook.com/adpreferences) or your operating system's "Limit Ad Tracking" / "Ask App Not to Track" settings.

## 5. BEHAVIOURAL ANALYTICS — MICROSOFT CLARITY

**WebEgg uses Microsoft Clarity** (operated by Microsoft Corporation) on our marketing pages and funnel to understand how visitors actually interact with the Service. Clarity captures:

- Page views, click positions, scroll depth, and rage-click signals

- Anonymised session replays of mouse movement, scroll, and clicks — recorded as a structural reconstruction of the page, not a video

- Approximate location (country / region), device, browser, and operating system

**What we mask from Clarity:** we explicitly mark the following as sensitive so they are never captured: passwords, email addresses, phone numbers, postal addresses, personal names (e.g. partner / honoree / contact names), business names, and free-text personal narratives in the funnel (e.g. love story, wedding notes, gift message, AI direction notes, testimonials). Payment card details enter via Stripe Elements in a sandboxed iframe and are not visible to Clarity at all.

This data is shared with Microsoft to provide us with usage insights, heatmaps, and session replays. We use it solely to improve the Service — not for advertising. Microsoft retains the data per its [Privacy Statement](https://privacy.microsoft.com/privacystatement) and the [Clarity Terms of Service](https://clarity.microsoft.com/terms).

**Under CCPA / CPRA**, Clarity is used for analytics — not for cross-context behavioural advertising — so it does not constitute "sale" or "sharing". We nonetheless honour the Global Privacy Control (GPC) signal and disable Clarity for any visitor whose browser sends it.

**Under GDPR (EU/UK)**, this processing relies on your consent. EU/UK visitors will see a cookie consent banner before Clarity loads.

## 6. THIRD-PARTY SERVICES

We use the following third-party services to operate WebEgg. Each has its own privacy policy:

************************************

| Service | Purpose | Data shared |
| --- | --- | --- |
| Meta (Facebook) Pixel | Conversion tracking + retargeting ads | Page views, button clicks, IP, browser fingerprint, Meta cookie ID |
| Microsoft Clarity | Behavioural analytics, heatmaps, session replay | Page interactions, click positions, anonymised session reconstructions (PII fields masked) |
| Stripe | Payment processing | Billing info, email, last 4 of card |
| Cloudflare Pages | Website hosting & CDN | Your published website files, visitor IP (for security) |
| Resend | Transactional email | Email address, message content |
| Porkbun / Name.com | Domain registration | Name, email, address (registrant info — public WHOIS unless privacy enabled) |
| Anthropic / OpenRouter | AI website generation and editing | Your business brief and edit prompts |
| Pexels / Unsplash | Stock photography | Search keywords from your brief |
| Railway | Backend hosting | All application data (processor only — does not access content) |

## 7. COOKIES & TRACKING TECHNOLOGIES

We use the following cookies and similar technologies:

- **Session cookie (essential):** Keeps you logged in. Cannot be disabled without losing access to the Service.

- **Language preference cookie (essential):** Remembers your selected funnel language for 90 days.

- **Meta Pixel cookies (advertising — opt-out available):** Set by Meta to track ad performance and enable retargeting. These are third-party cookies set by `connect.facebook.net`.

- **Microsoft Clarity cookies (analytics — opt-out available):** `_clck` and `_clsk`, set by `clarity.ms` to associate page views into a session and produce heatmaps. Auto-disabled under GPC.

You can block third-party cookies in your browser settings. Blocking them will not affect WebEgg functionality but will opt you out of Meta retargeting.

## 8. DO NOT SELL OR SHARE MY PERSONAL INFORMATION (CCPA)

California residents have the right to opt out of the "sale" or "sharing" of personal information under the CCPA / CPRA. While we do not sell personal information for monetary consideration, our use of the Meta Pixel may qualify as "sharing" under California law (cross-context behavioural advertising).

To opt out:

- Email [privacy@webegg.ai](mailto:privacy@webegg.ai?subject=Do%20Not%20Sell%20or%20Share) with subject "Do Not Sell or Share". We will record your opt-out and disable the Meta Pixel for your account.

- Or enable your browser's Global Privacy Control (GPC) signal — we honour it automatically and it disables both Meta Pixel and Microsoft Clarity for your session.

- Or clear and block third-party cookies for `facebook.net` in your browser.

## 9. DATA RETENTION

- **Active accounts:** Data is retained for as long as your account is active.

- **After cancellation:** We retain your data for 30 days, then permanently delete it. You can export your site HTML at any time before deletion.

- **Free previews:** Preview data (site files, brief) may be deleted after 30 days of inactivity.

- **Contact form submissions:** Stored for as long as your account is active, then deleted with your account.

- **Analytics:** Page view data is retained for 12 months.

- **Meta Pixel events:** Stored by Meta per their [Data Policy](https://www.facebook.com/privacy/policy), typically 180 days.

## 10. DATA SECURITY

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords (bcrypt), restricted database access, and CVE-patched dependencies. However, no system is completely secure and we cannot guarantee absolute security.

## 11. YOUR RIGHTS

Regardless of where you live, you have the right to:

- **Access** the personal data we hold about you

- **Correct** inaccurate data (via your dashboard or by emailing us)

- **Delete** your account and associated data (via Settings → Delete Account)

- **Export** your website files at any time

- **Opt out** of marketing emails (one-click unsubscribe link in every marketing email)

- **Opt out** of Meta Pixel tracking (see Section 7)

**California residents (CCPA / CPRA):** You also have the right to know what personal information is collected, the right to delete it, the right to correct inaccurate data, the right to limit use of sensitive information, and the right to opt out of sharing for cross-context behavioural advertising (see Section 7). You may designate an authorised agent to make requests on your behalf.

**EU / UK residents (GDPR):** You also have the right to data portability, the right to object to processing, the right to restrict processing, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority (e.g. [ICO](https://ico.org.uk) in the UK).

To exercise any of these rights, email [privacy@webegg.ai](mailto:privacy@webegg.ai). We will respond within 30 days (CCPA) or one month (GDPR).

## 12. CHILDREN'S PRIVACY

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it promptly.

## 13. INTERNATIONAL TRANSFERS

WebEgg is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (EU) or equivalent safeguards.

## 14. CHANGES TO THIS POLICY

We may update this policy from time to time. We will notify you of material changes by email and post the updated effective date at the top of this page. Continued use of the Service after changes constitutes acceptance.

## 15. CONTACT

Privacy questions or requests: [privacy@webegg.ai](mailto:privacy@webegg.ai)

General support: [support@webegg.ai](mailto:support@webegg.ai)

**Mailing address (for legal notices, CAN-SPAM, and CCPA verifiable requests):**

Modern Media LLC

29021 Bouquet Canyon Rd, #286

Santa Clarita, CA 91390

USA